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Abstract. Disclosures of breaches of the customer databases of LexisNexis and ChoicePoint have raised interest 
in the business and regulation of data brokers, companies that collect personal information from public and 
private records and sell this information to public and private sector entities. The growth of this industry has 
generally tracked the increase in government and private sector use of personal information. The vast amount 
of personal information that data brokers collect and the improper access to such data, however, have spurred 
concern as to the dangers of identity theft. Identity theft is reportedly the fastest growing crime in America. 
This report provides an overview of the data brokerage industry and more specific background on LexisNexis 
and ChoicePoint. 
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Summary 



Disclosures of breaches of the customer databases of LexisNexis and ChoicePoint 
have raised interest in the business and regulation of data brokers, companies that collect 
personal information from public and private records and sell this information to public 
and private sector entities. The growth of this industry has generally tracked the 
increase in government and private sector use of personal information. The vast 
amount of personal information that data brokers collect and the improper access to such 
data, however, have spurred concern as to the dangers of identity theft. Identity theft is 
reportedly the fastest growing crime in America. This report provides an overview of 
the data brokerage industry and more specific background on LexisNexis and 
ChoicePoint. 



Introduction 1 

In the first few months of 2005, two leading data brokers, LexisNexis and 
ChoicePoint, announced that unauthorized individuals had breached their security 
measures and obtained personal information (e.g., Social Security numbers, addresses) 
about hundreds of thousands of individuals. These companies and others like them — so- 
called “data brokers” — operate largely free from federal and state regulation. 2 The recent 
scandals have led to calls for tighter regulation of the data brokerage industry, creating the 
need for more complete information on the types of businesses that make up this industry, 
and the types of services they provide. This report provides an overview of the industry 
and specific case studies of ChoicePoint and LexisNexis. 



1 This report was originally prepared by Nathan Brooks, Legislative Attorney. 

2 See CRS Report RL33005, Information Brokers: Federal and State Laws, Angie A. Welbom. 
In certain circumstances, laws restrict the collection and use of specific kinds of personal 
information. For example, the Gramm-Leach-Bliley Act regulates access to and use of consumer 
financial information under certain circumstances. 15 U.S.C. §§ 6801-6809. 
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